PowerBI Embedded advantages

[Arendp]

hi there,

Just rolling into the usage of PowerBI Embedded. It looks great but one thing is still not clear to me.

I understand that Publish to the WEB has disadvantages because everyone with the url can access the report.

What if my dashboard is published in my customer's portal (which has a user login). So only if you are logged in the portal, you can see the dashboard (and have access to the dashboard). Why is the publish to WEB in this case a problem? Nobody from outside can see this link, can't they? Maybe I am just missing something here?

And if I use PBI Embedded, and the same report is embedded on that portal, somebody with access to the embed Javascript Code, can also access the dashboard, right? So in this case the access is also arranged by logging in to the portal or not. 

I hope it's clear what I try to get a better understanding of. Sorry if it might sounds confusing, but I have the feeling i'm not completely getting the security of PowerBI Embedded.

[Greg_Deckler]

With Publish to Web, if the URL gets out, anyone can see it. There is no authentication at all. Plus, other things like export to Excel are turned off, etc. What you are talking about is called security through obscurity. If you want to go down that route nobody can stop you.

With Embed, there is always authentication. So no, you cannot just grab the javascript code and get access without authenticating. This is actual security. 

The level of security you desire is your choice.

[Arendp]

Thanks for your answer.

Maybe I am doing something wrong.

I created a Javascript based on a tutorial here:

https://www.youtube.com/watch?v=BwBnAN2PrWA&list=PLib8Q64STW-tLS5zh0HZmfT0QEopzqDc3&index=7&t=0s

Maybe it's because in this example the App ID and username and password of Powerbi are stored in the Function app on Azure?

I am pretty sure if I give you the result of this youtube tutorial, you are also allowed to see this. 

What would be the best way to arrange authentication for PowerBI Embedded?